HackGit
Open in Telegram
The channel was created for cybersecurity specialists. • Offensive Security • RedTeam • Malware Research • BugBounty • OSINT • etc Disclaimer: t.me/hackgit/2082 Donations - Ads: t.me/hackgit/5423
Show more📈 Analytical overview of Telegram channel HackGit
Channel HackGit (@hackgit) in the English language segment is an active participant. Currently, the community unites 21 579 subscribers, ranking 4 526 in the Technologies & Applications category and 1 853 in the USA region.
📊 Audience metrics and dynamics
Since its creation on невідомо, the project has demonstrated rapid growth, gathering an audience of 21 579 subscribers.
According to the latest data from 02 March, 2025, the channel demonstrates stable activity. Although there has been a change in the number of participants by 19 over the last 30 days and by 0 over the last 24 hours, overall reach remains high.
- Verification status: Not verified
- Engagement rate (ER): The average audience engagement rate is 0%. Within the first 24 hours after publication, content typically collects N/A% reactions from the total number of subscribers.
- Post reach: On average, each post receives 0 views. Within the first day, a publication typically gains 0 views.
- Reactions and interaction: The audience actively supports content: the average number of reactions per post is 0.
📝 Description and content policy
The author describes the resource as a platform for expressing subjective opinions:
“The channel was created for cybersecurity specialists.
• Offensive Security
• RedTeam
• Malware Research
• BugBounty
• OSINT
• etc
Disclaimer:
t.me/hackgit/2082
Donations - Ads:
t.me/hackgit/5423”
Thanks to the high frequency of updates (latest data received on 03 March, 2025), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.
21 579
Subscribers
No data24 hours
-37 days
+1930 days
Posts Archive
21 579
SideLoadingDLL
Python script to generate "proxy" DLL files load unsafely by binaries on runtime, makes it super easy to perform a DLL Sideloading attack or hijacking. This implementation makes sure that all system calls still go through ntdll.dll to avoid the usage of direct systemcalls.
https://github.com/MaorSabag/SideLoadingDLL
t.me/hackgit
21 579
OrcaC2
OrcaC2 is a multi-functional C&C framework based on Websocket encrypted communication.
https://github.com/Ptkatz/OrcaC2
21 579
cmstplua-uac-bypass
This is a Cobalt Strike (CS) Beacon Object File (BOF) which exploits the CMSTPLUA COM interface. It masquerade the PEB of the current process to a Windows process, and then utilises COM Elevation Moniker on the CMSTPLUA COM object in order to execute commands in an elevated context.
https://github.com/tijme/cmstplua-uac-bypass
21 579
linvo-scraper
Here you can find secure scraping using Puppeteer for different Linkedin actions
▫️ Login
▫️ Scrape profiles: Sales Nav / Normal
▫️ Connection Request
▫️ Follow message
▫️ Endorse Profile
▫️ Visit Profile
▫️ Like posts
▫️ Random Engagement
https://github.com/linvo-io/linvo-scraper
21 579
Firefox-Grabber
Simple Firefox grabber, which grab Twitter,Discord and Paypal infos
https://github.com/PL-V/Firefox-Grabber
21 579
NimShellcodeFluctuation
ShellcodeFluctuation PoC ported to Nim
https://github.com/S3cur3Th1sSh1t/NimShellcodeFluctuation
21 579
CVE-2022-40684
Critical Authentication Bypass in FortiOS and FortiProxy
https://github.com/dickson0day/CVE-2022-40684
#cve
21 579
Aftermath
Aftermath is a Swift-based, open-source incident response framework.
Aftermath can be leveraged by defenders in order to collect and subsequently analyze the data from the compromised host. Aftermath can be deployed from an MDM (ideally), but it can also run independently from the infected user's command line.
https://github.com/jamf/aftermath
21 579
CVE-2022-2992
Authenticated Remote Command Execution in Gitlab via GitHub import.
https://github.com/CsEnox/CVE-2022-2992
#cve
21 579
BOF2Shellcode
POC tool to convert a Cobalt Strike BOF into raw shellcode.
https://github.com/FalconForceTeam/BOF2shellcode
t.me/hackgit
21 579
THEDEVILSEYE
Extracts information (.onion links, descriptions) from the darkweb without requiring a Tor network.
https://github.com/rly0nheart/thedevilseye
#OSINT
21 579
awesome-tunneling
The purpose of this list is to track and compare tunneling solutions. This is primarily targeted toward self-hosters and developers who want to do things like exposing a local webserver via a public domain name, with automatic HTTPS, even if behind a NAT or other restricted network.
https://github.com/anderspitman/awesome-tunneling
21 579
The Prime Hunt Browser Extension
The Prime Hunt is a browser extension for threat hunting. It introduces a One UI idea to simplify and speed up the investigation process regardless of the SIEMs or EDR in use. This is useful both for threat hunters starting off their careers and for seasoned professionals.
The former can master the different security platforms and query languages faster, learning the right methodology from the very beginning, while the latter benefit from a streamlined workflow.
https://github.com/socprime/the-prime-hunt
21 579
Server Side Template Injection Payloads
Server-side template injection is when an attacker is able to use native template syntax to inject a malicious payload into a template, which is then executed server-side.
Template engines are designed to generate web pages by combining fixed templates with volatile data. Server-side template injection attacks can occur when user input is concatenated directly into a template, rather than passed in as data. This allows attackers to inject arbitrary template directives in order to manipulate the template engine, often enabling them to take complete control of the server. As the name suggests, server-side template injection payloads are delivered and evaluated server-side, potentially making them much more dangerous than a typical client-side template injection.
https://github.com/payloadbox/ssti-payloads
21 579
AoratosWin
A tool that removes traces of executed applications on Windows OS which can easily be listed with tools such as ExecutedProgramList by Nirsoft.
https://github.com/PinoyWH1Z/AoratosWin
t.me/hackgit
21 579
GitFive
GitFive is an OSINT tool to investigate GitHub profiles.
Features:
▫️ Usernames / names history
▫️ Usernames / names variations
▫️ Email address to GitHub account
▫️ Find GitHub's accounts from a list of email addresses
▫️ Lists identities used by the target
▫️ Clones and analyze every target's repos
▫️ Highlights emails tied to GitHub's target account
▫️ Finds local identities (UPNs, ex : jeanpierre@My-Computer.local)
▫️ Finds potential secondary GitHub accounts
▫️ Don't needs repos to work (but better)
▫️ Generates every possible email address combinations and looks for matchs
▫️ Dumps SSH public keys
▫️ JSON export
https://github.com/mxrch/gitfive
21 579
Reverse SSH
Want to use SSH for reverse shells? Now you can.
▫️ Manage and connect to reverse shells with native SSH syntax
▫️ Dynamic, local and remote forwarding
▫️ Native SCP and SFTP implementations for retrieving files from your targets
▫️ Full windows shell
▫️ Mutual client & server authentication to create high trust control channels
And more!
https://github.com/NHAS/reverse_ssh
21 579
Vichiti
Vichiti is an cross-platform OSINT focused tool developed with Nodejs. It can perform several functions such as:
▫️ Gather information regarding an Instagram username
▫️ Validate the existence of an email address
▫️ Whois lookup
▫️ Geo-location lookup
▫️ Find your public IP address
▫️ Scan for ports
▫️ Expand shortened URLs
▫️ Safety check of URLs
▫️ MAC Address lookup
▫️ Crypto wallet address's balance check
https://github.com/umair9747/vichiti
#Donate t.me/hackgit🍻»»»
21 579
crimson-forge
Crimson Forge intends to provide sustainable evasion capabilities for native code on the x86 and AMD64 architectures. It achieves this by rewriting the input code utilizing the following two techniques:
Shuffling: Instructions are shuffled into a new order at the basic block level. This is a reliable technique and does not modify the size of resulting binary.
Alterations: Instructions are swapped with functional equivalents, effectively de-optimizing them. New instructions are inserted into the same graph used by the Shuffling technique, allowing them to be reordered as well.
Due to the nature of the re-writing, it is not necessary for processed shellcode to exist within writeable memory. This eliminates a very common pattern which is identified as malicious by many AV and EDR systems.
https://github.com/zeroSteiner/crimson-forge
